DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Poly Clariti Manager: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-07-23
Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Poly Clariti Manager ausnutzen, um beliebige SQL- und OS-Befehle auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen preiszugeben und sich erhöhte Rechte zu verschaffen.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-43489US | medium5.2 | — | ||
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could deserialize untrusted data without validat… | ||||
| CVE-2025-43488US | medium4.8 | — | ||
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a bypass of the application's XSS fi… | ||||
| CVE-2025-43487US | medium6.8 | — | ||
A potential privilege escalation through Sudo vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The firmware flaw does not properly imple… | ||||
| CVE-2025-43486US | medium4.8 | — | ||
A potential stored cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website allows user input to be stored and… | ||||
| CVE-2025-43485US | medium4.5 | — | ||
A potential security
vulnerability has been identified in the Poly Clariti Manager for versions
prior to 10.12.2. The vulnerability could potentially allow a privileged
user to ret… | ||||
| CVE-2025-43484US | medium6.1 | — | ||
A potential reflected cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website does not validate or sanitize th… | ||||
| CVE-2025-43483US | medium5.7OT erhöht | — | ||
A potential security vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
vulnerability could allow the retrieval of hardcoded cryptogra… | ||||
| CVE-2025-43022US | high7.2 | — | ||
A potential SQL injection vulnerability has been identified in the Poly
Clariti Manager for versions prior to 10.12.1. The vulnerability could allow
a privileged user to execute SQ… | ||||
| CVE-2025-43021US | medium5.7OT erhöht | — | ||
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default… | ||||
| CVE-2025-43020US | medium6.8 | — | ||
A potential command
injection vulnerability has been identified in the Poly Clariti Manager for
versions prior to 10.12.2. The vulnerability could allow a privileged user
to submit… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan